Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/uO7fIJXDVwXmWvYzrLvCvk6vMyw.roa
File: uO7fIJXDVwXmWvYzrLvCvk6vMyw.roa (raw, json)
Hash identifier: 7VZi8vf9cTd9cPoBtyXJxKld01rVJ8ydI/MS363lfA8=
Subject key identifier: B8:EE:DF:20:95:C3:57:05:E6:5A:F6:33:AC:BB:C2:BE:4E:AF:33:2C
Certificate issuer: /CN=dbe627e43eb116236cc713615ce9134140718636
Certificate serial: 019F2368C1C687EDA6DF8C7884A7D2B3C613
Authority key identifier: DB:E6:27:E4:3E:B1:16:23:6C:C7:13:61:5C:E9:13:41:40:71:86:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/uO7fIJXDVwXmWvYzrLvCvk6vMyw.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209727
IP address blocks: 195.128.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c1:c6:87:ed:a6:df:8c:78:84:a7:d2:b3:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe627e43eb116236cc713615ce9134140718636
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8eedf2095c35705e65af633acbbc2be4eaf332c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:d0:62:56:57:68:10:14:14:d7:6b:d0:68:
ce:b7:a5:42:8f:f5:04:a0:18:cc:32:b4:87:06:97:
67:ec:fa:95:b3:ae:c5:c1:b0:b7:29:c1:54:16:71:
a3:c3:ab:83:86:77:cb:b5:1d:88:25:89:08:da:0f:
70:cc:83:02:02:92:b9:4c:f9:e0:bd:17:59:0b:66:
11:cc:f1:ac:7e:06:bc:8b:37:18:4d:e3:2d:b8:7e:
05:15:d8:2d:8a:62:fb:9b:64:0e:24:71:94:62:df:
4f:e5:3d:b1:8e:97:2c:7a:92:db:f6:de:5a:ab:e8:
2d:7d:0b:25:57:d1:51:2b:ee:cc:f7:52:dc:d8:08:
a7:03:69:18:dd:7a:e5:c8:bf:82:68:48:7c:7f:48:
c5:16:01:c7:38:1b:70:78:10:f5:b8:35:a2:1c:02:
0c:75:fc:d9:99:2b:2d:d4:35:98:53:49:37:37:31:
eb:d1:ea:f8:11:75:a3:1a:34:61:87:ab:09:d3:9d:
37:18:f5:65:df:16:30:1b:47:b9:56:60:a9:b8:8c:
a9:6d:d9:dd:4e:66:fb:1b:07:87:d1:cc:2d:18:12:
47:b0:49:f9:e5:53:8e:79:92:33:c8:f1:51:64:b7:
40:ee:2f:b2:7e:31:5a:93:cf:d9:87:c1:65:50:70:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:DF:20:95:C3:57:05:E6:5A:F6:33:AC:BB:C2:BE:4E:AF:33:2C
X509v3 Authority Key Identifier:
keyid:DB:E6:27:E4:3E:B1:16:23:6C:C7:13:61:5C:E9:13:41:40:71:86:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/uO7fIJXDVwXmWvYzrLvCvk6vMyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.37.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0e:72:c7:16:bf:01:ec:74:6e:df:26:e7:36:20:5f:6a:dc:
5b:f3:e7:b0:fe:c1:c3:32:a9:02:bf:84:be:bf:4a:68:c0:ba:
ce:76:ef:44:1d:7a:1e:47:91:5e:ac:db:2b:c3:64:24:ee:0c:
1a:bf:d7:86:3b:11:d4:af:90:98:12:58:e7:76:a9:f9:19:48:
8b:fd:2a:97:d5:2b:b3:bf:be:51:16:c1:17:71:2c:50:ca:59:
28:e1:e5:d7:e2:07:df:92:70:25:81:6b:00:1e:a6:9d:24:93:
51:8f:6a:ad:0c:29:6d:71:26:23:b0:ad:a1:ab:ff:98:22:07:
ca:89:4f:97:52:96:4b:31:17:12:5c:f7:de:23:5e:62:22:d6:
65:ba:aa:4b:e9:ae:1b:03:23:52:9f:b3:c3:76:e7:f5:c2:85:
d6:da:cd:80:2d:e3:ff:84:cc:f5:46:66:15:75:02:01:76:59:
05:f1:8c:47:a9:48:cb:02:cc:62:10:90:55:dc:35:df:6d:81:
b0:1d:0a:fc:23:ce:dd:e2:af:88:b1:c0:24:dd:9c:a1:57:43:
79:6b:48:e5:bf:62:43:4e:9e:c9:7e:d9:99:38:8e:69:e8:60:
ab:93:af:d4:83:0c:c8:db:a9:71:ee:49:7c:60:cf:35:5d:25:
1c:e4:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:15 2026 by rpki-client